fa9ad6a46f8ea34daf5072888e34a1f1b7bf131f09670048c74d377103e2480b

General

Target

fa9ad6a46f8ea34daf5072888e34a1f1b7bf131f09670048c74d377103e2480b
Size

558KB
MD5

4f23b530eb9767dccfc76286ccd7e1d1
SHA1

39c9027d7ac85bd87711464913d7858ed34dd9ee
SHA256

fa9ad6a46f8ea34daf5072888e34a1f1b7bf131f09670048c74d377103e2480b
SHA512

8dcabe47d67cdc2d33f782d79317e35f7b0518fa44bcd787bbe1ef3f25517c104213d6549416f033cad41395e42f1d38da56f1c82f5cad5aea3a17d223d6e919
SSDEEP

12288:VO7fr8wl5bb7dbNIEFLHnjRLEgE9ZOsPuXfvXdTkzAlF5ayzJGn83Q9:07nH7pZFLHFEgEn6f/dTYAfAKs83Q9

Score

N/A

Malware Config

Signatures

Files

fa9ad6a46f8ea34daf5072888e34a1f1b7bf131f09670048c74d377103e2480b
.exe windows x86

f5493265f2e9e4804e7b60ecd741387a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord16
ord4
_TrackMouseEvent
ord6
CreateToolbarEx
FlatSB_GetScrollProp
DrawStatusTextW
FlatSB_SetScrollProp
PropertySheetW
UninitializeFlatSB

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException
InterlockedDecrement
InterlockedIncrement

aclui

ord2
ord1

ntdsapi

DsListDomainsInSiteA

Sections

.text
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5493265f2e9e4804e7b60ecd741387a

Headers

File Characteristics

Imports

comctl32

kernel32

aclui

ntdsapi

Sections

.text Size: 526KB - Virtual size: 526KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 310KB

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 526KB - Virtual size: 526KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 310KB

.rsrc
Size: 21KB - Virtual size: 21KB